Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/0WduJy1R3JnqLXfxIx2n27dvLyE.roa
File: 0WduJy1R3JnqLXfxIx2n27dvLyE.roa (raw, json)
Hash identifier: StHFtYzaHFLCOfMjcg6LjiqyFSq6T9MWhhOs+bWS1iA=
Subject key identifier: D1:67:6E:27:2D:51:DC:99:EA:2D:77:F1:23:1D:A7:DB:B7:6F:2F:21
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 040CEBFD
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/0WduJy1R3JnqLXfxIx2n27dvLyE.roa
Signing time: Sat 01 Jan 2022 11:54:56 +0000
ROA not before: Sat 01 Jan 2022 11:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.33.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67955709 (0x40cebfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Jan 1 11:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1676e272d51dc99ea2d77f1231da7dbb76f2f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:ff:8e:c1:04:d6:1a:45:46:b1:cf:51:51:
a5:55:ae:47:ee:c5:59:d5:c3:2a:f8:ca:a6:0c:6c:
26:bf:e1:83:62:8a:55:b5:07:52:5e:65:0c:0c:6e:
e7:60:32:c4:c5:40:b8:88:2a:a4:53:c2:52:17:ec:
eb:55:e2:ad:55:3b:e2:a0:1b:ae:9b:1d:bb:dc:11:
a8:9a:16:60:6f:57:a2:5a:10:08:61:45:fd:41:a3:
9f:59:b6:19:d2:6d:7d:8e:37:59:46:c3:f4:45:d9:
45:6b:71:e2:09:15:9c:ea:da:40:05:55:3e:63:c7:
12:d2:2c:a4:e8:cb:37:59:71:1e:c0:fb:19:a3:f3:
05:c8:94:66:1a:70:84:0a:d7:a8:a4:7b:c5:d2:f8:
2d:6d:58:e2:2c:26:6c:b6:86:90:da:93:b4:c9:41:
1e:50:4e:83:6b:36:44:df:a6:4a:8b:e3:92:fe:4b:
7b:1c:90:37:bc:07:ae:cf:c9:f1:f9:e0:09:ad:d2:
61:89:9e:78:76:09:16:76:de:61:a5:e0:70:5b:fa:
40:32:4b:10:9d:ea:57:3f:a3:ea:53:b2:df:41:60:
1a:4a:45:f8:53:8f:0d:89:fd:f7:dd:3e:6c:a3:f1:
aa:ea:39:09:95:e5:86:3a:be:1d:a0:cd:51:fa:a2:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:67:6E:27:2D:51:DC:99:EA:2D:77:F1:23:1D:A7:DB:B7:6F:2F:21
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/0WduJy1R3JnqLXfxIx2n27dvLyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.137.0/24
Signature Algorithm: sha256WithRSAEncryption
de:5f:1d:c0:30:e8:e3:0d:aa:8b:f7:b3:d1:30:db:f7:0f:3b:
e8:8a:90:f4:1d:c4:d2:4c:88:43:02:5a:bf:82:58:f5:98:df:
29:c1:98:38:d3:aa:0d:c4:a2:a9:d3:ac:65:4b:41:88:44:38:
56:68:a2:e3:e1:72:49:31:34:67:fc:a1:a2:0c:03:35:43:5c:
58:09:d5:b7:b7:dc:58:4a:32:b1:d3:70:a8:70:45:60:59:56:
0f:58:17:5e:27:e4:46:9c:0c:8a:ff:21:c3:75:2b:9d:ff:85:
17:ba:b3:b1:7e:8c:87:74:ea:c1:d8:18:f6:4c:00:94:0f:c9:
57:2e:1c:bf:2f:80:0f:87:b1:51:28:cf:5d:b5:75:ef:23:c3:
10:76:85:37:92:c4:56:88:40:ce:60:1c:3d:26:49:e0:51:a9:
87:32:30:cc:02:d5:74:5b:c1:89:db:70:4b:7c:8a:69:05:eb:
a3:f0:81:e3:fa:4e:bc:d5:0d:85:fa:ea:26:2a:56:c4:e4:74:
b9:d1:83:41:b9:60:cd:7e:df:5c:6c:10:14:1b:ba:70:95:c5:
5d:f7:a2:c8:ba:74:29:da:8a:5d:47:f2:09:82:af:b2:df:e1:
73:35:a2:3a:75:55:33:0e:27:bf:a9:63:ed:38:59:a6:df:34:
51:12:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:17 2024 by rpki-client on console-ams.rpki-client.org